Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32332d3233203d3e20323731333535.roa
File:                     3138312e3233322e3133362e302f32332d3233203d3e20323731333535.roa (raw, json)
Hash identifier:          HK2ZiUBR0U77c2UvOsjuIgEsVZJzFCYBGyrBYYmpzrE=
Subject key identifier:   E7:CD:A7:FD:CF:A9:DF:A1:B6:CE:FF:DC:F5:9E:86:55:E8:6B:D0:9C
Certificate issuer:       /CN=F5A743CB79514A022DEC422535A63FCBFC40185B
Certificate serial:       C54B25CD56C2C95C8B418165C2EAB81B3773A0
Authority key identifier: F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32332d3233203d3e20323731333535.roa
Signing time:             Thu 07 Nov 2024 16:43:28 +0000
ROA not before:           Thu 07 Nov 2024 16:38:28 +0000
ROA not after:            Thu 06 Nov 2025 16:43:28 +0000
asID:                     271355
IP address blocks:        181.232.136.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c5:4b:25:cd:56:c2:c9:5c:8b:41:81:65:c2:ea:b8:1b:37:73:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5A743CB79514A022DEC422535A63FCBFC40185B
        Validity
            Not Before: Nov  7 16:38:28 2024 GMT
            Not After : Nov  6 16:43:28 2025 GMT
        Subject: CN=E7CDA7FDCFA9DFA1B6CEFFDCF59E8655E86BD09C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:05:f4:2e:a2:ca:82:5c:84:3b:00:55:45:bb:
                    d1:1e:00:90:28:e0:84:ef:e1:38:0c:83:ad:e6:f3:
                    88:b3:d2:83:c0:05:45:ff:24:87:6a:bb:0a:8c:86:
                    28:55:6a:a0:09:16:e9:36:ce:8d:76:fe:9a:ce:ee:
                    72:49:10:7c:2b:65:a9:09:78:f4:76:1a:e7:9f:d6:
                    9f:d2:4b:d7:5d:20:ca:85:7e:29:f1:d0:08:d5:7d:
                    c2:d6:6b:cb:49:ab:84:ce:04:0a:0c:20:09:1f:51:
                    f4:4b:2e:80:00:c0:4b:69:2e:01:2c:17:4a:ae:72:
                    7d:ac:3c:92:55:a6:0d:60:1f:29:8c:1e:d8:d5:75:
                    7e:5d:18:87:58:4b:20:9c:47:5f:78:f7:74:ab:33:
                    b8:6c:96:8d:c9:57:b4:4a:fd:f0:ae:62:b7:85:18:
                    80:eb:7f:ec:01:d3:2a:70:84:a8:05:ae:fe:ef:9d:
                    c1:2b:b8:da:a8:fd:89:5b:11:0f:ea:50:7b:2e:b0:
                    e5:e0:49:96:44:d2:13:17:a8:0e:7e:cb:63:70:42:
                    15:a1:77:d1:12:b3:fe:12:41:cf:65:6e:56:36:d2:
                    a9:01:b9:8f:20:e6:50:c7:ad:13:ae:1a:b0:01:b4:
                    55:31:3f:1d:03:da:c7:19:70:1c:90:a0:51:80:c2:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CD:A7:FD:CF:A9:DF:A1:B6:CE:FF:DC:F5:9E:86:55:E8:6B:D0:9C
            X509v3 Authority Key Identifier:
                keyid:F5:A7:43:CB:79:51:4A:02:2D:EC:42:25:35:A6:3F:CB:FC:40:18:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/F5A743CB79514A022DEC422535A63FCBFC40185B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F5A743CB79514A022DEC422535A63FCBFC40185B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Dsb4rCAub16dTz8umJW8f5vtdq5jpmjPMPKk8VActTx/0/3138312e3233322e3133362e302f32332d3233203d3e20323731333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:64:8f:d9:2d:ed:24:98:a5:02:0c:cb:e7:51:94:dc:b4:7e:
         cc:ae:37:44:6c:84:c0:ee:1c:7d:2e:5c:e9:b5:8d:43:f6:3c:
         c0:69:55:b5:a9:7f:dc:19:23:c7:cd:5a:8c:f4:85:f0:49:52:
         50:c1:c7:6a:9c:ad:df:80:9c:d7:d6:02:3c:1f:8f:a8:83:f6:
         6c:3d:ff:e2:fc:59:8d:94:65:66:32:2d:ca:c9:ba:ce:0b:7e:
         fb:55:87:b5:bb:90:04:60:c7:ba:76:03:c8:0c:1c:0f:d3:05:
         30:b4:65:d3:78:0c:88:d6:d5:44:4e:30:f2:7d:22:e6:c6:dd:
         d3:06:8d:36:e4:e3:ac:04:65:c1:3e:81:f5:7a:cd:ff:9d:aa:
         63:da:97:6c:92:57:e6:ac:2d:19:93:84:ed:d3:e2:38:b8:9d:
         1e:e2:1f:41:aa:aa:0a:95:ef:49:d9:2c:12:c1:22:27:b4:3a:
         bd:80:78:b9:97:f2:41:4b:54:05:46:84:3b:62:5a:72:80:37:
         46:6d:86:39:25:cf:6c:63:f0:d0:eb:81:48:1c:ab:ab:9b:90:
         1f:9b:60:7f:78:7e:a8:76:97:da:e0:03:d2:af:e2:10:b9:64:
         5b:0e:a0:9f:d7:7d:3d:60:76:81:0e:7f:2e:d1:f8:3b:b1:26:
         81:1a:ab:72
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUAMVLJc1Wwslci0GBZcLquBs3c6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjVBNzQzQ0I3OTUxNEEwMjJERUM0MjI1MzVBNjNGQ0JG
QzQwMTg1QjAeFw0yNDExMDcxNjM4MjhaFw0yNTExMDYxNjQzMjhaMDMxMTAvBgNV
BAMTKEU3Q0RBN0ZEQ0ZBOURGQTFCNkNFRkZEQ0Y1OUU4NjU1RTg2QkQwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBfQuosqCXIQ7AFVFu9EeAJAo
4ITv4TgMg63m84iz0oPABUX/JIdquwqMhihVaqAJFuk2zo12/prO7nJJEHwrZakJ
ePR2Guef1p/SS9ddIMqFfinx0AjVfcLWa8tJq4TOBAoMIAkfUfRLLoAAwEtpLgEs
F0qucn2sPJJVpg1gHymMHtjVdX5dGIdYSyCcR19493SrM7hslo3JV7RK/fCuYreF
GIDrf+wB0ypwhKgFrv7vncEruNqo/YlbEQ/qUHsusOXgSZZE0hMXqA5+y2NwQhWh
d9ESs/4SQc9lblY20qkBuY8g5lDHrROuGrABtFUxPx0D2scZcByQoFGAwobrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU582n/c+p36G2zv/c9Z6GVehr0JwwHwYDVR0j
BBgwFoAU9adDy3lRSgIt7EIlNaY/y/xAGFswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNERzYjRyQ0F1YjE2ZFR6OHVtSlc4ZjV2dGRxNWpwbWpQTVBLazhWQWN0
VHgvMC9GNUE3NDNDQjc5NTE0QTAyMkRFQzQyMjUzNUE2M0ZDQkZDNDAxODVCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y1QTc0M0NCNzk1MTRBMDIy
REVDNDIyNTM1QTYzRkNCRkM0MDE4NUIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzREc2I0ckNBdWIxNmRUejh1bUpXOGY1dnRkcTVqcG1qUE1QS2s4VkFjdFR4LzAv
MzEzODMxMmUzMjMzMzIyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzczMTMzMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbXoiDANBgkqhkiG9w0BAQsFAAOCAQEAnWSP
2S3tJJilAgzL51GU3LR+zK43RGyEwO4cfS5c6bWNQ/Y8wGlVtal/3Bkjx81ajPSF
8ElSUMHHapyt34Cc19YCPB+PqIP2bD3/4vxZjZRlZjItysm6zgt++1WHtbuQBGDH
unYDyAwcD9MFMLRl03gMiNbVRE4w8n0i5sbd0waNNuTjrARlwT6B9XrN/52qY9qX
bJJX5qwtGZOE7dPiOLidHuIfQaqqCpXvSdksEsEiJ7Q6vYB4uZfyQUtUBUaEO2Ja
coA3Rm2GOSXPbGPw0OuBSByrq5uQH5tgf3h+qHaX2uAD0q/iELlkWw6gn9d9PWB2
gQ5/LtH4O7EmgRqrcg==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:10 2025 by rpki-client